My Musings on Operational Risk Management